@mojaloop/api-snippets 13.0.6 → 13.0.9

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mojaloop/api-snippets",
-  "version": "13.0.6",
+  "version": "13.0.9",
   "description": "Mojaloop API specification reusable snippets",
   "main": "lib/index.js",
   "types": "lib/index.d.ts",
@@ -18,9 +18,9 @@
     "build:openapi": "npm run build:v1.0; npm run build:v1.1; npm run build:thirdparty",
     "build:v1.0": "openapi bundle --output docs/fspiop-rest-v1.0-openapi3-snippets.yaml --ext yaml fspiop/v1_0/openapi3/openapi.yaml && swagger-cli validate docs/fspiop-rest-v1.0-openapi3-snippets.yaml",
     "build:v1.1": "openapi bundle --output docs/fspiop-rest-v1.1-openapi3-snippets.yaml --ext yaml fspiop/v1_1/openapi3/openapi.yaml && swagger-cli validate docs/fspiop-rest-v1.1-openapi3-snippets.yaml",
-    "build:thirdparty": "openapi bundle --dereferenced --output docs/thirdparty-openapi3-snippets.yaml --ext yaml thirdparty/openapi3/openapi.yaml && swagger-cli validate docs/thirdparty-openapi3-snippets.yaml",
-    "build:thirdparty-dfsp": "swagger-cli bundle -o ./thirdparty/openapi3/thirdparty-dfsp-api.yaml -t yaml ./thirdparty/openapi3/thirdparty-dfsp-api.template.yaml",
-    "build:thirdparty-pisp": "swagger-cli bundle -o ./thirdparty/openapi3/thirdparty-pisp-api.yaml -t yaml ./thirdparty/openapi3/thirdparty-pisp-api.template.yaml",
+    "build:thirdparty": "openapi bundle --dereferenced --output docs/thirdparty-openapi3-snippets.yaml --ext yaml thirdparty/v1_0/openapi3/openapi.yaml && swagger-cli validate docs/thirdparty-openapi3-snippets.yaml",
+    "build:thirdparty-dfsp": "swagger-cli bundle -o ./thirdparty/v1_0/openapi3/thirdparty-dfsp-api.yaml -t yaml ./thirdparty/v1_0/openapi3/thirdparty-dfsp-api.template.yaml",
+    "build:thirdparty-pisp": "swagger-cli bundle -o ./thirdparty/v1_0/openapi3/thirdparty-pisp-api.yaml -t yaml ./thirdparty/v1_0/openapi3/thirdparty-pisp-api.template.yaml",
     "lint": "eslint ./src/**/*.ts *.js",
     "prepare": "npm run build",
     "release": "standard-version --releaseCommitMessageFormat 'chore(release): {{currentTag}} [skip ci]'",

package/tests/dto/thirdparty.test.ts

@@ -2,7 +2,6 @@ import { Schemas } from '../../lib/thirdparty'
 
 describe('thirdparty', () => {
   const accountAddress: Schemas.AccountAddress = 'account-id'
-  const authenticationTypeQRCODE: Schemas.AuthenticationType = 'QRCODE'
   const currency: Schemas.Currency = 'USD'
   const name: Schemas.Name = 'name'
   const account: Schemas.Account = {
@@ -10,7 +9,6 @@ describe('thirdparty', () => {
     address: accountAddress,
     currency
   }
-  const authorizationChannelTypeU2F: Schemas.AuthorizationChannelType = 'U2F'
   const extensionKey: Schemas.ExtensionKey = 'key'
   const extensionValue: Schemas.ExtensionValue = 'value'
   const extension: Schemas.Extension = {
@@ -43,17 +41,7 @@ describe('thirdparty', () => {
     currency,
     amount: '1'
   }
-  const quote: Schemas.QuotesIDPutResponse = {
-    transferAmount: money,
-    payeeReceiveAmount: money,
-    payeeFspFee: money,
-    payeeFspCommission: money,
-    expiration: dateTime,
-    geoCode,
-    ilpPacket,
-    condition: ilpCondition,
-    extensionList
-  }
+
   const consentRequestChannelType: Schemas.ConsentRequestChannelType = 'WEB'
   const consentRequestChannelTypeWeb: Schemas.ConsentRequestChannelTypeWeb = 'WEB'
   const consentRequestChannelTypeOTP: Schemas.ConsentRequestChannelTypeOTP = 'OTP'
@@ -124,7 +112,7 @@ describe('thirdparty', () => {
   const verifiedCredential: Schemas.VerifiedCredential = {
     credentialType: credentialTypeFIDO,
     status: 'VERIFIED',
-    payload: FIDOPublicKeyCredentialAttestation
+    fidoPayload: FIDOPublicKeyCredentialAttestation
   }
 
   const transactionType: Schemas.TransactionType = {
@@ -154,27 +142,11 @@ describe('thirdparty', () => {
     expect(accountAddress).toBeDefined()
   })
 
-  test('AuthorizationChannelType', () => {
-    expect(authorizationChannelTypeU2F).toBeDefined()
-  })
-
   test('AuthorizationResponseType', () => {
     const authorizationResponseType: Schemas.AuthorizationResponseType = 'ACCEPTED'
     expect(authorizationResponseType).toBeDefined()
   })
 
-  test('AuthorizationsPostRequest', () => {
-    const authorizationsPostRequest: Schemas.AuthorizationsPostRequest = {
-      authenticationType: authorizationChannelTypeU2F,
-      retriesLeft: integer,
-      amount: money,
-      transactionId: correlationId,
-      transactionRequestId: correlationId,
-      quote
-    }
-    expect(authorizationsPostRequest).toBeDefined()
-  })
-
   test('BinaryString', () => {
     const binaryString: Schemas.BinaryString = '1234'
     expect(binaryString).toBeDefined()
@@ -227,7 +199,7 @@ describe('thirdparty', () => {
     expect(scopeActionTransfer).toBeDefined()
     expect(scopeActionStatement).toBeDefined()
   })
-  
+
   test('ConsentsIDPatchResponseRevoked', () => {
     const consentsIDPatchResponse: Schemas.ConsentsIDPatchResponseRevoked = {
       status: consentStatusRevoked,
@@ -603,7 +575,7 @@ describe('thirdparty', () => {
       responseType: 'ACCEPTED',
       signedPayload: {
         signedPayloadType: 'GENERIC',
-        genericSignedPayload: 'some signature utf-8 string',
+        genericSignedPayload: 'some signature utf-8 string'
       }
     }
     expect(thirdpartyRequestsAuthorizationsIDPutResponseGeneric).toBeDefined()
@@ -623,22 +595,6 @@ describe('thirdparty', () => {
     expect(transactionType).toBeDefined()
   })
 
-  test('TransactionRequestsPostRequest', () => {
-    const transactionRequestsPostRequest: Schemas.TransactionRequestsPostRequest = {
-      transactionRequestId: correlationId,
-      payee: party,
-      payer: partyIdInfo,
-      amount: money,
-      transactionType,
-      note,
-      geoCode,
-      authenticationType: authenticationTypeQRCODE,
-      expiration: dateTime,
-      extensionList
-    }
-    expect(transactionRequestsPostRequest).toBeDefined()
-  })
-
   test('ThirdpartyRequestsVerificationsIDPutResponse', () => {
     const thirdpartyRequestsVerificationsIdPutResponse: Schemas.ThirdpartyRequestsVerificationsIDPutResponse = {
       authenticationResponse: 'VERIFIED'

package/thirdparty/v1_0/openapi3/components/headers/Content-Length.yaml

@@ -0,0 +1 @@
+$ref: '../../../../../fspiop/v1_1/openapi3/components/headers/Content-Length.yaml'

package/thirdparty/v1_0/openapi3/components/headers/Content-Type.yaml

@@ -0,0 +1 @@
+$ref: '../../../../../fspiop/v1_1/openapi3/components/headers/Content-Type.yaml'

package/thirdparty/v1_0/openapi3/components/parameters/Accept.yaml

@@ -0,0 +1 @@
+$ref: '../../../../../fspiop/v1_1/openapi3/components/parameters/Accept.yaml'

package/thirdparty/v1_0/openapi3/components/parameters/Content-Length.yaml

@@ -0,0 +1 @@
+$ref: '../../../../../fspiop/v1_1/openapi3/components/parameters/Content-Length.yaml'

package/thirdparty/v1_0/openapi3/components/parameters/Content-Type.yaml

@@ -0,0 +1 @@
+$ref: '../../../../../fspiop/v1_1/openapi3/components/parameters/Content-Type.yaml'

package/thirdparty/v1_0/openapi3/components/parameters/Date.yaml

@@ -0,0 +1 @@
+$ref: '../../../../../fspiop/v1_1/openapi3/components/parameters/Date.yaml'

package/thirdparty/v1_0/openapi3/components/parameters/FSPIOP-Destination.yaml

@@ -0,0 +1 @@
+$ref: '../../../../../fspiop/v1_1/openapi3/components/parameters/FSPIOP-Destination.yaml'

package/thirdparty/v1_0/openapi3/components/parameters/FSPIOP-Encryption.yaml

@@ -0,0 +1 @@
+$ref: '../../../../../fspiop/v1_1/openapi3/components/parameters/FSPIOP-Encryption.yaml'

package/thirdparty/v1_0/openapi3/components/parameters/FSPIOP-HTTP-Method.yaml

@@ -0,0 +1 @@
+$ref: '../../../../../fspiop/v1_1/openapi3/components/parameters/FSPIOP-HTTP-Method.yaml'

package/thirdparty/v1_0/openapi3/components/parameters/FSPIOP-Signature.yaml

@@ -0,0 +1 @@
+$ref: '../../../../../fspiop/v1_1/openapi3/components/parameters/FSPIOP-Signature.yaml'

package/thirdparty/v1_0/openapi3/components/parameters/FSPIOP-Source.yaml

@@ -0,0 +1 @@
+$ref: '../../../../../fspiop/v1_1/openapi3/components/parameters/FSPIOP-Source.yaml'

package/thirdparty/v1_0/openapi3/components/parameters/FSPIOP-URI.yaml

@@ -0,0 +1 @@
+$ref: '../../../../../fspiop/v1_1/openapi3/components/parameters/FSPIOP-URI.yaml'

package/thirdparty/v1_0/openapi3/components/parameters/ID.yaml

@@ -0,0 +1 @@
+$ref: '../../../../../fspiop/v1_1/openapi3/components/parameters/ID.yaml'

package/thirdparty/v1_0/openapi3/components/parameters/SubId.yaml

@@ -0,0 +1 @@
+$ref: '../../../../../fspiop/v1_1/openapi3/components/parameters/SubId.yaml'

package/thirdparty/v1_0/openapi3/components/parameters/Type.yaml

@@ -0,0 +1 @@
+$ref: '../../../../../fspiop/v1_1/openapi3/components/parameters/Type.yaml'

package/thirdparty/v1_0/openapi3/components/parameters/X-Forwarded-For.yaml

@@ -0,0 +1 @@
+$ref: '../../../../../fspiop/v1_1/openapi3/components/parameters/X-Forwarded-For.yaml'

package/thirdparty/v1_0/openapi3/components/responses/200.yaml

@@ -0,0 +1 @@
+$ref: '../../../../../fspiop/v1_1/openapi3/components/responses/200.yaml'

package/thirdparty/v1_0/openapi3/components/responses/202.yaml

@@ -0,0 +1 @@
+$ref: '../../../../../fspiop/v1_1/openapi3/components/responses/202.yaml'

package/thirdparty/v1_0/openapi3/components/responses/400.yaml

@@ -0,0 +1 @@
+$ref: '../../../../../fspiop/v1_1/openapi3/components/responses/400.yaml'

package/thirdparty/v1_0/openapi3/components/responses/401.yaml

@@ -0,0 +1 @@
+$ref: '../../../../../fspiop/v1_1/openapi3/components/responses/401.yaml'

package/thirdparty/v1_0/openapi3/components/responses/403.yaml

@@ -0,0 +1 @@
+$ref: '../../../../../fspiop/v1_1/openapi3/components/responses/403.yaml'

package/thirdparty/v1_0/openapi3/components/responses/404.yaml

@@ -0,0 +1 @@
+$ref: '../../../../../fspiop/v1_1/openapi3/components/responses/404.yaml'

package/thirdparty/v1_0/openapi3/components/responses/405.yaml

@@ -0,0 +1 @@
+$ref: '../../../../../fspiop/v1_1/openapi3/components/responses/405.yaml'

package/thirdparty/v1_0/openapi3/components/responses/406.yaml

@@ -0,0 +1 @@
+$ref: '../../../../../fspiop/v1_1/openapi3/components/responses/406.yaml'

package/thirdparty/v1_0/openapi3/components/responses/501.yaml

@@ -0,0 +1 @@
+$ref: '../../../../../fspiop/v1_1/openapi3/components/responses/501.yaml'

package/thirdparty/v1_0/openapi3/components/responses/503.yaml

@@ -0,0 +1 @@
+$ref: '../../../../../fspiop/v1_1/openapi3/components/responses/503.yaml'

package/thirdparty/{openapi3 → v1_0/openapi3}/components/schemas/Account.yaml

@@ -1,6 +1,9 @@
 title: Account
 type: object
-description: Data model for the complex type Account.
+description: >-
+  Data model for the complex type Account.
+
+  https://github.com/mojaloop/documentation/blob/master/website/versioned_docs/v1.0.1/api/thirdparty/data-models.md#3211-account
 properties:
   accountNickname:
     $ref: ./Name.yaml
@@ -10,5 +13,5 @@ properties:
     $ref: ./Currency.yaml
 required:
   - accountNickname
-  - id
+  - address
   - currency

package/thirdparty/v1_0/openapi3/components/schemas/AccountAddress.yaml

@@ -0,0 +1,25 @@
+title: AccountAddress
+type: string
+description: >-
+  The AccountAddress data type is a variable length string with a maximum size
+  of 1023 characters and consists of:
+
+  Alphanumeric characters, upper or lower case. (Addresses are case-sensitive
+  so that they can contain data encoded in formats such as base64url.)
+
+  - Underscore (_)
+  - Tilde (~)
+  - Hyphen (-)
+  - Period (.) Addresses MUST NOT end in a period (.) character
+
+  An entity providing accounts to parties (i.e. a participant) can provide any
+  value for an AccountAddress that is meaningful to that entity.
+  It does not need to provide an address that makes the account identifiable
+  outside the entity's domain.
+
+  IMPORTANT: The policy for defining addresses and the life-cycle of these is at the discretion of the address space owner (the payer DFSP in this case).
+
+  https://github.com/mojaloop/documentation/blob/master/website/versioned_docs/v1.0.1/api/thirdparty/data-models.md#3212-accountaddress
+pattern: '^([0-9A-Za-z_~\-\.]+[0-9A-Za-z_~\-])$'
+minLength: 1
+maxLength: 1023

package/thirdparty/v1_0/openapi3/components/schemas/AccountList.yaml

@@ -0,0 +1,11 @@
+title: AccountList
+type: array
+description: >-
+  The AccountList data model is used to hold information about the accounts
+  that a party controls.
+
+  https://github.com/mojaloop/documentation/blob/master/website/versioned_docs/v1.0.1/api/thirdparty/data-models.md#3213-accountlist
+items:
+  $ref: ./Account.yaml
+minItems: 1
+maxItems: 256

package/thirdparty/v1_0/openapi3/components/schemas/AccountsIDPutResponse.yaml

@@ -0,0 +1,21 @@
+title: AccountsIDPutResponse
+type: object
+description: >-
+  Callback and data model information for GET /accounts/{ID}:
+
+  Callback - PUT /accounts/{ID}
+  Error Callback - PUT /accounts/{ID}/error
+  Data Model - Empty body
+
+  The PUT /accounts/{ID} response is used to inform the requester of the result
+  of a request for accounts information. The identifier ID given in the call
+  are the values given in the original request.
+
+  https://github.com/mojaloop/documentation/blob/master/website/versioned_docs/v1.0.1/api/thirdparty/data-models.md#31121--put-accountsid
+properties:
+  accounts:
+    $ref: ./AccountList.yaml
+  extensionList:
+    $ref: ./ExtensionList.yaml
+required:
+  - accounts

package/thirdparty/v1_0/openapi3/components/schemas/Amount.yaml

@@ -0,0 +1 @@
+$ref: '../../../../../fspiop/v1_1/openapi3/components/schemas/Amount.yaml'

package/thirdparty/v1_0/openapi3/components/schemas/AmountType.yaml

@@ -0,0 +1 @@
+$ref: '../../../../../fspiop/v1_1/openapi3/components/schemas/AmountType.yaml'

package/thirdparty/{openapi3 → v1_0/openapi3}/components/schemas/AuthenticationResponse.yaml

@@ -2,8 +2,9 @@ title: AuthenticationResponse
 type: string
 enum:
   - VERIFIED
-  - REJECTED
-description: |-
+description: >-
+  The AuthenticationResponse enumeration describes the result of authenticating
+  verification request.
+
   Below are the allowed values for the enumeration AuthenticationResponse.
   - VERIFIED - The challenge was correctly signed.
-  - REJECTED - The challenge was not correctly signed.

package/thirdparty/v1_0/openapi3/components/schemas/AuthenticatorAssertionResponse.yaml

@@ -0,0 +1,32 @@
+title: FIDOPublicKeyCredentialAssertion
+type: object
+description: >-
+  A data model representing an AssertionStatement from WebAuthN.
+
+  https://github.com/mojaloop/documentation/blob/master/website/versioned_docs/v1.0.1/api/thirdparty/data-models.md#32130-authenticatorassertionresponse
+properties:
+  authenticatorData:
+    type: string
+    description: |
+      Authenticator data object.
+    minLength: 49
+    maxLength: 256
+  clientDataJSON:
+    type: string
+    description: |
+      JSON string with client data.
+    minLength: 121
+    maxLength: 512
+  signature:
+    type: string
+    description: |
+      The signature generated by the private key associated with this credential.
+    minLength: 59
+    maxLength: 256
+  userHandle:
+    type: string
+    description: |
+      This field is optionally provided by the authenticator, and
+      represents the user.id that was supplied during registration.
+    minLength: 1
+    maxLength: 88

package/thirdparty/v1_0/openapi3/components/schemas/AuthenticatorAttestationResponse.yaml

@@ -0,0 +1,23 @@
+title: AuthenticatorAttestationResponse
+type: object
+description: |
+  A data model representing an AttestationStatement from WebAuthN.
+
+  https://github.com/mojaloop/documentation/blob/master/website/versioned_docs/v1.0.1/api/thirdparty/data-models.md#32129-authenticatorattestationresponse
+properties:
+  clientDataJSON:
+    type: string
+    description: |
+      JSON string with client data
+    minLength: 121
+    maxLength: 512
+  attestationObject:
+    type: string
+    description: |
+      CBOR.encoded attestation object
+    minLength: 306
+    maxLength: 2048
+required:
+  - clientDataJSON
+  - attestationObject
+additionalProperties: false

package/thirdparty/v1_0/openapi3/components/schemas/BinaryString.yaml

@@ -0,0 +1 @@
+$ref: '../../../../../fspiop/v1_1/openapi3/components/schemas/BinaryString.yaml'

package/thirdparty/v1_0/openapi3/components/schemas/ConsentRequestChannelType.yaml

@@ -0,0 +1,9 @@
+title: ConsentRequestChannelType
+type: string
+enum:
+  - WEB
+  - OTP
+description: |
+  The auth channel being used for the consent request.
+  - WEB - DFSP can support authorization via a web-based login.
+  - OTP - DFSP can support authorization via a One Time PIN.

package/thirdparty/{openapi3 → v1_0/openapi3}/components/schemas/ConsentRequestChannelTypeOTP.yaml

@@ -3,4 +3,4 @@ type: string
 enum:
   - OTP
 description: |
-  The OTP auth channel being used for PUT consentRequest/{ID} request.
+  The OTP auth channel being used for `PUT /consentRequests/{ID}` request.

package/thirdparty/{openapi3 → v1_0/openapi3}/components/schemas/ConsentRequestChannelTypeWeb.yaml

@@ -3,4 +3,4 @@ type: string
 enum:
   - WEB
 description: |
-  The web auth channel being used for PUT consentRequest/{ID} request.
+  The web auth channel being used for `PUT /consentRequest/{ID}` request.

package/thirdparty/v1_0/openapi3/components/schemas/ConsentRequestsIDPatchRequest.yaml

@@ -0,0 +1,17 @@
+title: ConsentRequestsIDPatchRequest
+type: object
+description: >-
+  Used by: PISP
+
+  After the user completes an out-of-band authorization with the DFSP,
+  the PISP will receive a token which they can use to prove to the DFSP
+  that the user trusts this PISP.
+
+  https://github.com/mojaloop/documentation/blob/master/website/versioned_docs/v1.0.1/api/thirdparty/data-models.md#31222-patch-consentrequestsid
+properties:
+  authToken:
+    $ref: ./BinaryString.yaml
+  extensionList:
+    $ref: ./ExtensionList.yaml
+required:
+  - authToken

package/thirdparty/{openapi3 → v1_0/openapi3}/components/schemas/ConsentRequestsIDPutResponseOTP.yaml

@@ -22,6 +22,8 @@ properties:
   # whitelist the PISP's url ahead of time.
   callbackUri:
     $ref: ./Uri.yaml
+  extensionList:
+    $ref: ./ExtensionList.yaml
 required:
   - scopes
   - authChannels

package/thirdparty/{openapi3 → v1_0/openapi3}/components/schemas/ConsentRequestsIDPutResponseWeb.yaml

@@ -29,6 +29,8 @@ properties:
   # login.
   authUri:
     $ref: ./Uri.yaml
+  extensionList:
+    $ref: ./ExtensionList.yaml
 required:
   - scopes
   - authChannels

package/thirdparty/v1_0/openapi3/components/schemas/ConsentRequestsPostRequest.yaml

@@ -0,0 +1,51 @@
+title: ConsentRequestsPostRequest
+type: object
+description: >-
+  Used by: PISP
+
+  The HTTP request POST /consentRequests is used to request a DFSP to grant
+  access to one or more accounts owned by a customer of the DFSP for the
+  PISP who sends the request.
+
+  Callback and data model for POST /consentRequests:
+
+  Callback: PUT /consentRequests/{ID}
+  Error callback: PUT /consentRequests/{ID}/error
+  Data model - see below url
+
+  https://github.com/mojaloop/documentation/blob/master/website/versioned_docs/v1.0.1/api/thirdparty/data-models.md#31212-post-consentrequests
+properties:
+  consentRequestId:
+    $ref: ./CorrelationId.yaml
+  userId:
+    type: string
+    description: >-
+      The identifier used in the **GET /accounts/**_{ID}_.
+      Used by the DFSP to correlate an account lookup to a `consentRequest`
+    minLength: 1
+    maxLength: 128
+  scopes:
+    type: array
+    minLength: 1
+    maxLength: 256
+    items:
+      $ref: ./Scope.yaml
+  authChannels:
+    type: array
+    minLength: 1
+    maxLength: 256
+    items:
+      $ref: ./ConsentRequestChannelType.yaml
+  #   The callback uri that the user will be redirected to after completing the
+  #   out of band WEB authentication with the DFSP. Used to allow the DFSP to
+  #   whitelist the PISP's url ahead of time.
+  callbackUri:
+    $ref: ./Uri.yaml
+  extensionList:
+    $ref: ./ExtensionList.yaml
+required:
+  - consentRequestId
+  - userId
+  - scopes
+  - authChannels
+  - callbackUri

package/thirdparty/{openapi3 → v1_0/openapi3}/components/schemas/ConsentStatusIssued.yaml

@@ -1,4 +1,4 @@
-title: ConsentStatus
+title: ConsentStatusIssued
 type: string
 enum:
   - ISSUED

package/thirdparty/{openapi3 → v1_0/openapi3}/components/schemas/ConsentStatusRevoked.yaml

@@ -1,4 +1,4 @@
-title: ConsentStatus
+title: ConsentStatusRevoked
 type: string
 enum:
   - REVOKED

package/thirdparty/{openapi3 → v1_0/openapi3}/components/schemas/ConsentsIDPatchResponseRevoked.yaml

@@ -10,6 +10,8 @@ properties:
     $ref: ./ConsentStatusRevoked.yaml
   revokedAt:
     $ref: ./DateTime.yaml
+  extensionList:
+    $ref: ./ExtensionList.yaml
 required:
   - status
   - revokedAt

package/thirdparty/{openapi3 → v1_0/openapi3}/components/schemas/ConsentsIDPatchResponseVerified.yaml

@@ -2,7 +2,7 @@ title: ConsentsIDPatchResponseVerified
 description: |
   PATCH /consents/{ID} request object.
 
-  Sent by the DFSP to the PISP when a consent is verified.
+  Sent by the DFSP to the PISP when a consent is issued and verified.
   Used in the "Register Credential" part of the Account linking flow.
 type: object
 properties:
@@ -13,5 +13,7 @@ properties:
         $ref: ./CredentialStatusVerified.yaml
     required:
       - status
+  extensionList:
+    $ref: ./ExtensionList.yaml
 required:
   - credential

package/thirdparty/{openapi3 → v1_0/openapi3}/components/schemas/ConsentsIDPutResponseSigned.yaml

@@ -7,15 +7,17 @@ description: >
   Called by a `PISP` to after signing a challenge. Sent to a DFSP for
   verification.
 properties:
+  status:
+    $ref: ./ConsentStatusIssued.yaml
   scopes:
     type: array
     items:
       $ref: ./Scope.yaml
-  status:
-    $ref: ./ConsentStatusIssued.yaml
   credential:
     $ref: ./SignedCredential.yaml
+  extensionList:
+    $ref: ./ExtensionList.yaml
 required:
   - scopes
   - credential
-additionalProperties: false
+additionalProperties: false

package/thirdparty/{openapi3 → v1_0/openapi3}/components/schemas/ConsentsIDPutResponseVerified.yaml

@@ -7,15 +7,17 @@ description: >
   Called by a `auth-service` to notify a DFSP that a credential has
   been verified and registered.
 properties:
+  status:
+    $ref: ./ConsentStatusIssued.yaml
   scopes:
     type: array
     items:
       $ref: ./Scope.yaml
-  status:
-    $ref: ./ConsentStatusIssued.yaml
   credential:
     $ref: ./VerifiedCredential.yaml
+  extensionList:
+    $ref: ./ExtensionList.yaml
 required:
   - scopes
   - credential
-additionalProperties: false
+additionalProperties: false

package/thirdparty/{openapi3 → v1_0/openapi3}/components/schemas/ConsentsPostRequestAUTH.yaml

@@ -10,6 +10,8 @@ properties:
     description: |
       Common ID between the PISP and FSP for the Consent object
       determined by the DFSP who creates the Consent.
+  consentRequestId:
+    $ref: ./CorrelationId.yaml
   scopes:
     minLength: 1
     maxLength: 256
@@ -20,10 +22,12 @@ properties:
     allOf:
       - $ref: ./SignedCredential.yaml
   status:
-    $ref: ConsentStatus.yaml
+    $ref: ./ConsentStatus.yaml
+  extensionList:
+    $ref: ./ExtensionList.yaml
 required:
   - consentId
   - scopes
   - credential
-  - status 
+  - status
 additionalProperties: false